Cookie Policy
Pursuant to EU Regulation 2016/679 (hereinafter the "Regulation"), the Data Controller, identified below, provides this cookie notice for the website www.apothekealimentare.com (hereinafter the "Site"), intended for anyone visiting the Site.
1. Data Controller
Data Controller: Gigante Alimentari S.R.L.
Data Controller's details: Via Pizunzo, Zona Industriale, 70015 Noci (BA); VAT No./Tax Code 05246760721; REA 407911
Contact details: Via Pizunzo, Zona Industriale, 70015 Noci (BA); EMAIL privacy@gigantealimentari.com; PEC (certified email) gigantealimentari@pec.it
2. Characteristics and purpose of a cookie
First of all, the user should know that a cookie is a small file that websites store on visitors' computers and that is capable of collecting various information during browsing. More specifically, it is the web browser that stores cookies on the device used (e.g. a computer or a mobile phone).
When the user returns to a previously visited site, the site is able to read this information stored in the cookie and provide, for example, a personalized browsing experience. Indeed, the user's device will be associated with one of these online identifiers, which is capable of leaving traces that, when combined with unique identifiers and other information received from the web browser, can be used to create a personal profile.
The purposes pursued may be manifold: computer authentication, facilitating access to online content, session monitoring, storage of information on specific configurations relating to users accessing the service, storage of preferences, advertising, personalized advertising, etc.
3. Types of cookies, specific purposes and legal basis of processing
Cookies can be divided into several categories:
(i) First-party or third-party (in relation to the subjective profile of the publishers).
In particular, cookies are "first-party" if managed directly by the owner of the visited site, or "third-party" if set or managed by an organization other than the owner of the visited site (for example, because the site contains elements residing on servers other than those hosting the visited site).
(ii) Session or persistent (in relation to the temporal profile of cookie storage).
They are divided into "temporary" or "session" cookies, which expire at the end of a browser session (i.e. when the browser is closed), and "persistent" cookies, which remain stored even after the browser is closed (as in the case of sites that allow login credentials to be remembered).
(iii) Technical/necessary, profiling, or analytics (in relation to the function and purpose of the processing).
There are "technical/necessary" cookies, which the controller uses to provide a service requested by the user or to enable browsing, and without which certain operations could not be carried out or would be more complex and/or less secure. For these reasons, it should be considered that, for the use of such cookies, it is sufficient for the controller to provide the relevant notice, being exempt from the obligation to request consent for their installation. The legal basis will therefore mainly be the performance of a contract (Art. 6(1)(b) of the Regulation) or compliance with a legal obligation (Art. 6(1)(c) of the Regulation).
Distinct from these are "profiling" cookies, which make it possible to track the user's online browsing and create profiles of their tastes, habits, and choices. In this way, the controller can tailor the provision of the service so that it is precisely in line with the user's interests. Cookies used for such purposes may only be installed on devices upon obtaining the user's consent, so the legal basis for the processing will be consent (Art. 6(1)(a) of the Regulation).
Finally, between these last two categories are "analytics" cookies. Analytics cookies are used to assess the effectiveness of a service provided by the controller, or for the design of the web platform, as well as to better measure its traffic. These are profiling cookies if they allow the direct identification of the user, and therefore require the user's consent for their installation. Conversely, they are comparable to technical/necessary cookies when created and used directly by the site to improve its usability, or when, even if provided by third parties, they employ tools that reduce or eliminate the ability to identify the individual.
4. Cookies used by the Site
Below we inform the user about the cookies present on the Site. An always up-to-date list of cookies is available through the dedicated consent management tool that appears at the bottom of the Site upon opening it, or subsequently, by pressing the dedicated button always available on the Site.
Technical/necessary cookies
The Site uses certain cookies necessary for its proper functioning.
Profiling cookies
The Site does not use dedicated profiling cookies for the purpose of personalizing browsing in line with preferences and interests, or managing targeted advertising campaigns.
Analytics cookies
The Site uses dedicated analytics cookies mainly for the purpose of: enabling the proper functioning of the Site, assessing the effectiveness of a service or product provided by the Controller, designing the web platform, and better measuring the Site's traffic. For this purpose, the Site uses cookies from the following providers:
| Provider | Transfer outside the EU | Link |
|---|---|---|
| Google (Analytics 4) | According to the provider's statements: "Google Analytics 4 does not log or store individual IP addresses. Analytics provides approximate geographic location data by deriving the following metadata from IP addresses: city (plus derived latitude and longitude of the city), continent, country, region, subcontinent. For traffic within the EU, IP address data is used solely to derive geographic location data before being deleted. It is not logged, made accessible, or used for any other purpose." However, in certain situations Google may transfer, store, or process the data collected in the United States of America or in other countries outside the territory of the European Union. Transfers outside the European Union will take place in compliance with the provisions of EU Regulation 2016/679. |
Google Privacy Policy Further information on Google Analytics Further information on Google Analytics (2) Terms for transfers outside the EU FAQ on data access by US authorities Tool to disable Google Analytics |
| Hotjar Technologies Ltd. | Hotjar is a company based in the EU. In providing its services, Hotjar states that it may make use of providers or sub-processors located in countries outside the EEA. Any transfers of personal data to such countries take place through the mechanisms provided for under Articles 44 et seq. of the GDPR, and in accordance with the safeguards indicated by the provider in its privacy documentation. |
Hotjar Privacy Policy Information on data transfer |
5. Social network buttons, widgets, and other third-party cookies
The Site may use services provided by third parties, i.e. organizations that are autonomous and distinct from the data controller indicated above. Even though the controller allows third parties to access the Site in order to send cookies to the user's device, it has no control over the information provided by such cookies and has no access to such data. This information is entirely controlled by third parties in accordance with their respective privacy notices. Furthermore, these cookies will only be installed if the user has given consent.
Below are the links where the user can view the privacy notice regarding the management of data by the providers of the respective services:
- WhatsApp, privacy policy: https://www.whatsapp.com/legal/updates/privacy-policy/?lang=it
- Instagram, privacy policy: https://www.facebook.com/policy.php
6. Cookie options through browser settings
The user can change their cookie choices, for example by granting or denying consent to the installation of non-technical cookies, using the dedicated banner that appears at the bottom of the Site upon opening it, or subsequently by pressing the dedicated button always available on the Site.
We further inform the user that cookies can be enabled and disabled by accessing the browser settings:
- Internet Explorer
- Google Chrome
- Mozilla Firefox
- Safari
- Opera
- Google Chrome (Android)
- Safari for iOS (mobile devices)
In any case, cookies can be disabled using the opt-out tools provided by www.youronlinechoices.com (limited to the services listed on that platform).
7. Categories of recipients
For the purposes indicated above, the collected data may be disclosed, in fulfillment of a legal or contractual obligation or for instrumental reasons, to the following parties: public bodies, bodies responsible for controls and audits, entities assimilated to public bodies; professionals, consultants, or companies acting on behalf of the Controller (e.g. IT service providers); other organizations that provide services to the Controller.
8. Data dissemination
The data will not be disseminated.
9. Data transfer
The Controller may transfer personal data to a third country for reasons instrumental to the purposes set out above. Should it be necessary to rely on parties resident outside the territory of the European Union, we inform you that the precautions required by the Regulation will be adopted, basing the transfer on: adequacy decisions issued by the European Commission with respect to the recipient third countries; adequate safeguards provided by the party resident outside the territory of the European Union; binding corporate rules.
10. Data retention
The personal data collected will be retained for the retention periods indicated, for each cookie, in the dedicated consent management tool that appears at the bottom of the Site upon opening it, or subsequently, by pressing the dedicated button always available on the Site. However, some data may be retained for a longer period in the event of alleged computer crimes against the Site, for the management of any disputes, to comply with legal obligations, or to carry out internal or external investigations or inspections.
11. Rights of the data subject
With regard to the data provided, the user may request to exercise, where applicable, the following rights: access, erasure, rectification, restriction of processing, objection to processing, data portability, and withdrawal of consent where the processing is based on consent.
In addition to what is established in point 6, to exercise these rights the user may send a request to the Controller's contact details indicated in point 1.
Finally, if the user believes that a processing activity violates the Regulation, they may lodge a complaint with the supervisory authority (Italian Data Protection Authority — Garante per la Protezione dei Dati Personali) of the member state in which they reside, work, or where the alleged violation occurred.
12. Reference
With regard to the processing of personal data, please also refer to the other notices published on the Site.
Last updated: July 2026
Ultimo aggiornamento: 22/07/2026